Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa
File:                     ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa (raw, json)
Hash identifier:          L2cRyTpDI5aF/cwLBpkJtSZFUeeZZeTiQvdLPcwMcf0=
Subject key identifier:   04:79:DA:8A:B9:43:30:09:FE:3A:C6:F3:F1:40:CA:57:38:E3:50:66
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584789EC009DF09ED2B962E60E80
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     3738
IP address blocks:        192.250.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:00:9d:f0:9e:d2:b9:62:e6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=d803bc8a-20b7-4fd2-860b-79d1afb1763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:23:df:4b:67:df:b7:51:a5:08:d8:af:07:4f:
                    7a:55:52:c7:fd:8e:c9:b5:bc:80:d4:11:ab:14:e0:
                    28:28:3e:3b:9f:c1:f5:86:73:8c:e5:b3:59:a6:f0:
                    81:84:61:ea:83:23:9e:b0:29:bd:46:57:4d:9c:71:
                    8a:0f:62:17:50:4c:92:2f:64:6f:ec:6e:4c:3b:ef:
                    2b:3c:2e:e7:3f:0f:86:91:1b:9c:b9:00:b7:44:7f:
                    f6:4b:a9:d2:96:2c:71:b4:dd:1e:46:f8:08:b4:f2:
                    ff:51:a0:74:f1:ec:fe:eb:ed:ca:bc:19:03:ca:2d:
                    6b:e6:ad:02:03:a8:03:e2:11:3f:96:4e:3e:4f:3c:
                    7b:1b:84:af:df:fd:2c:9b:81:40:af:8d:c9:dd:c9:
                    c4:ef:a0:36:99:10:9a:7a:7d:be:99:c0:3a:00:a9:
                    7d:e8:9c:63:3c:de:3b:03:81:7b:b8:27:3e:34:ac:
                    ba:48:73:9f:67:c5:ae:53:f1:8c:07:d6:58:ae:c0:
                    1b:67:fa:4b:c4:7d:04:72:d2:82:88:2e:74:d2:17:
                    0f:e7:48:ff:7d:ab:01:dd:39:99:0b:34:3a:5e:96:
                    42:13:f1:41:04:be:78:2d:0f:e3:80:f7:fa:24:2a:
                    84:1e:08:6e:5d:96:2e:14:f3:41:03:ff:cb:19:dd:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:DA:8A:B9:43:30:09:FE:3A:C6:F3:F1:40:CA:57:38:E3:50:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ace6134a-74ae-36c8-8abd-cdd073bea4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:54:38:1e:8f:f4:98:aa:b6:43:41:d8:01:0a:22:72:85:07:
         fc:e5:1b:83:35:21:a6:91:d5:a6:38:14:f8:a8:54:31:ae:81:
         94:fe:2a:aa:b4:4e:bf:26:48:e4:ee:79:13:cc:4a:96:84:7d:
         25:1c:95:03:6f:53:af:9c:6b:b3:35:ee:39:77:7c:18:9e:cd:
         be:68:81:86:02:50:90:d2:4c:03:81:b5:ab:46:19:27:62:f1:
         35:72:6e:97:22:ab:0f:93:eb:1a:13:d6:17:80:e8:77:7a:0f:
         cd:85:0b:cd:5d:0d:8a:74:4d:e3:f7:b0:91:4e:b4:65:9b:7c:
         8a:09:ce:da:d3:4f:a4:aa:12:85:a9:bf:1b:78:1a:42:e7:c2:
         86:4d:01:66:f0:4f:77:34:76:cd:9f:26:32:fe:20:5f:bf:47:
         57:de:04:0c:45:8c:eb:39:b0:99:2f:8e:84:c0:5f:35:f5:20:
         3d:44:f5:58:bd:fc:d2:3a:90:33:6c:51:b0:0c:80:f0:ef:0d:
         80:97:40:f6:f0:b7:7b:e0:be:cb:07:dd:3a:9b:e2:2c:19:bd:
         61:c3:91:6e:a7:46:7e:48:b7:3e:49:88:f6:36:46:f6:d8:af:
         ac:83:52:90:ab:7e:0c:1e:0a:90:5b:a4:3e:07:16:de:b3:97:
         97:95:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org